RE: [logs] audits logs

From: Gerardo Amaya (jogegalogsat_private)
Date: Mon Mar 11 2002 - 07:45:18 PST

  • Next message: Nathan Kim: "Re: [logs] audits logs"

    I agree with that, there are simple usb keys, or parallel keys, with that
    you can be sure about what software your client is using in the first place.
    I log will give you a solution
    but not a proactive one.
    
    Gerardo
    
    -----Original Message-----
    From: Sweth Chandramouli [mailto:loganalysisat_private]
    Sent: Monday, March 11, 2002 9:30 AM
    To: 'loganalysisat_private'
    Subject: Re: [logs] audits logs
    
    
    	The only log-specific way that I can think of to solve
    this would be to have the apps write out their own logs to one single
    file (not using system logging like syslog), and have the apps
    cryptographically sign the file so that you can be sure that nothing
    is tampering with them.  That way, so long as the file exists at all
    (which, if they have used even one of the apps, is a given unless they
    are hiding logs from you), you get all of the usage info you need.
    	Moving a little off-topic, there are lots of other non-
    log-related solutions that people have come up with over the years,
    such as activation codes and "phone home" licensing mechanisms.  Those
    probably aren't appropriate for disucssion here, though.
    
    	-- Sweth.
    
    --
    Sweth Chandramouli ; <svcat_private>
    President, Idiopathic Systems Consulting
    
    ---------------------------------------------------------------------
    To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    For additional commands, e-mail: loganalysis-helpat_private
    
    
    _________________________________________________________
    Do You Yahoo!?
    Get your free @yahoo.com address at http://mail.yahoo.com
    
    
    ---------------------------------------------------------------------
    To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    For additional commands, e-mail: loganalysis-helpat_private
    



    This archive was generated by hypermail 2b30 : Mon Mar 11 2002 - 07:48:21 PST